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DETAILED ACTION 

This action is in response to tlie Request for Continued Examination filed 25 April 
2008. Claims 12-17,21, and 22 are cancelled by this amendment, and claims 4-11, 1 8, 
and 20 were previously cancelled. Claims 1-3 and 19 are currently pending. 

Response to Arguments 

Applicant's arguments filed 25 April 2008 have been fully considered but they are 
not persuasive. 

Applicant first argued that claim 1 differs from the Benantar reference in that the 
rules of claim 1 "specify if and how the data subject may be provided by the first data 
user to the second data user," in contrast to Benantar specifying what operations each 
user is allowed to perform on the data subject. The examiner respectfully disagrees, 
noting that figure 5 and column 6, lines 54-67 indicate that the user Alice is allowed to 
"administer" and "control" objects in group 2, and that users in the group programmers 
may "control" objects in group 2. Rules specifying administration of a data object 
implies the ability of the first user Alice to provide the data subject to a second user. 

With regards to claims 2, 3, and 19, the applicant similarly cited that the "rules" of 
claim 1 were not anticipated alone or in combination with either Tolopka or Gifford. The 
examiner respectfully disagrees, for the reason cited above. 
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Claim Rejections - 35 USC § 102 

Claims 1 and 2 are rejected under 35 U.S.C. 102(b) as being anticipated by 
Benantar et al. (U.S. Pat. No. 5,787,427). 

Witli respect to claim 1 : The Benantar reference describes an object-oriented 
system that provides security for objects by grouping objects that share common control 
access policies. 

A method, in a data processing system, for handling personally identifiable 
information, said method comprising: 

providing, in a computer, a first set of object classes representing active entities in an 
information-handling process, wherein a limited number of privacy-related actions 
represent operations performed on data and wherein each of the active entities is a 
human being or legal entity [ see Figure 4, Object Group I]; 

providing, in said computer, a second set of object classes representing data and rules 
in said information-handling process, wherein at least one object class has said rules 
associated with said data, and wherein said data represents said personally identifiable 
information [see Figure 4, Object Group 2]; and 

processing transactions, in the data processing system, involving said personally 
identifiable information, using said computer and said first and second set of object 
classes, so as to enforce a privacy policy, associated with the personally identifiable 
information and defined by said rules, against one or more active entities represented 
by said first set of object classes [ see column 3, lines 1-20], 
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wherein eacli of tlie one or more active entities represented by said first set of 
object classes is a liuman being or legal entity [ see column 3, lines 22-43] , wherein: 
a first active entity represented by a first object class in said first set of object classes is 
a first data user that requests said personally identifiable information from a data subject 
that is a second active entity represented by a second object class in said first set of 
object classes, 

said data subject is an active entity that is personally identifiable by said personally 
identifiable information; 

a third active entity represented by a third object class in said first set of object classes 
is a second data user that requests personally identifiable information from said first 
data user, and 

said rules define if and how said personally identifiable information may be provided, by 
said first data user, to said second data user [ see column 5, lines 35 -50]. 

Further reference is made to column 6, lines 48-53. 

Benantar discloses that the objects may represent various parties, see Figures 1 and 5, 
to address claim 2. 
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Claim Rejections - 35 USC § 103 

Claim 3 is rejected under 35 U.S.C. 103(a) as being unpatentable over Benantar 
et al. in view of Tolopka et al. (U.S. Pat. No. 6,044,349). 

The Benantar reference does not disclose an object class representing a filled 
paper form. 

The secondary reference Tolopka teaches a storage medium for storing personal 
information that is subject to access control for apportion the data among authorized 
entities. Figure 2 shows various types of information and options for authorizing access 
to different groups. The information may represent a paper filled form, see column 6, 
lines 36-52. 

It would have been obvious to one of ordinary skill in the art at the time the 
invention was made to have the objects in Benantar represent paper filled forms as 
taught in Tolopka as a convenient manner of obtaining personal information and 
populating as an object, see column 6, lines 36-52. 

Claim 19 is rejected under 35 U.S.C. 103(a) as being unpatentable over 
Benantar et al. (U.S. Pat. No. 5,787,427) in view of Gifford et al (U.S. Pat. No. 
5,614,927). 

The Benantar reference does not disclose transforming the personal information 
into a depersonalized format. 

The Gifford reference teaches protection of confidential information in a 
database. Column 8, lines 1-8, teaches a method where the correlation between public 



Application/Control Number: 09/884,311 
Art Unit: 2132 



Page 6 



attributes and private attributes are reduced by camouflaging oroutriglit removing some 
data to depersonalize the identifiable information based on rules. 

It would have been obvious to one of ordinary skill in the art at the time the 
invention was made to have the data in the object groups in Benantar be 
depersonalized, i.e. camouflaged or removed, as taught tin Gifford in order to protect 
confidential information from being inferred from a database, see column 4, lines 17-68. 



Conclusion 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to VIRGIL HERRING whose telephone number is 
(571)272-8189. The examiner can normally be reached on Monday-Friday. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Gilberto Barron can be reached on (571) 272-3799. The fax phone number 
for the organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. 

Virgil Herring 
Examiner 
Art Unit 2132 

A/. H./ 

Examiner, Art Unit 2132 
/Gilberto Barron Jr/ 

Supervisory Patent Examiner, Art Unit 2132 



